Minor logging messages adjustments

This commit is contained in:
Bernardo Damele 2010-01-29 23:19:52 +00:00
parent 979c919dc7
commit 7faefcca88

View File

@ -167,23 +167,24 @@ class Takeover(Abstraction, Metasploit, Registry):
logger.debug(debugMsg) logger.debug(debugMsg)
elif kb.dbms == "PostgreSQL": elif kb.dbms == "PostgreSQL":
warnMsg = "by default PostgreSQL on Windows runs as postgres " debugMsg = "by default PostgreSQL on Windows runs as postgres "
warnMsg += "user which has no access to LSASS: it is " debugMsg += "user which has no access to LSASS: it is "
warnMsg += "unlikely that the privilege escalation " debugMsg += "unlikely that the privilege escalation "
warnMsg += "via 'incognito' extension will be successful" debugMsg += "via 'incognito' extension will be successful"
logger.warn(warnMsg) logger.debug(debugMsg)
elif kb.dbms == "Microsoft SQL Server" and kb.dbmsVersion[0] in ( "2005", "2008" ): elif kb.dbms == "Microsoft SQL Server" and kb.dbmsVersion[0] in ( "2005", "2008" ):
warnMsg = "often Microsoft SQL Server %s " % kb.dbmsVersion[0] debugMsg = "often Microsoft SQL Server %s " % kb.dbmsVersion[0]
warnMsg += "runs as Network Service which has Windows " debugMsg += "runs as Network Service which has Windows "
warnMsg += "Impersonation Tokens" debugMsg += "Impersonation Tokens"
logger.warn(warnMsg) logger.debug(debugMsg)
uploaded = self.uploadChurrasco() uploaded = self.uploadChurrasco()
if not uploaded: if not uploaded:
warnMsg = "beware that the privilege escalation " debugMsg = "beware that the privilege escalation "
warnMsg += "might not work" debugMsg += "might not work via Churrasco if "
debugMsg += "MS09-012 patch is installed"
logger.warn(warnMsg) logger.warn(warnMsg)
elif kb.os != "Windows" and conf.privEsc: elif kb.os != "Windows" and conf.privEsc: